Google UCP — agentic shopping, cart, checkout, orders, delivery
Google UCP — agentic shopping, cart, checkout, orders, delivery
MCP Dev LATAM is a well-structured monorepo of 109 MCP servers for Latin American commerce APIs. The codebase shows good security practices overall: authentication is properly scoped (API keys, OAuth2), credentials are environment-variable based, and dangerous operations are avoided. One concrete concern is the `send_custom_event` tool in the Sift server, which allows arbitrary event types and fields to be sent to Sift's API—this could enable abuse if an agent is compromised. Minor code quality issues (broad exception handling, sensitive data in logs) present low risk but should be addressed. Permissions are appropriate for the declared purpose of connecting to regional payment, banking, and fiscal APIs. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Set these up before or after installing:
Environment variable: UCP_API_KEY
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-codespar-mcp-ucp": {
"env": {
"UCP_API_KEY": "your-ucp-api-key-here"
},
"args": [
"-y",
"mcp-dev-latam"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.